From: Jordon on 4 Mar 2010 12:17 Rebecca Chung wrote: > For future reference, I found this link useful: > http://www.bleepingcomputer.com/virus-removal/remove-antivirus-soft > > It looks like I have to do a bunch of other stuff before I can use the > Malwarebytes software, so I'll try this once I have access to another > computer and I'll report back. :) Have you tried running Malwarebytes with Windows in Safe Mode? BTW, it would be beneficial if you'd quote the post you're responding to. Or at least the relevant parts of it. -- Jordon
From: RossettoeCioccolato on 4 Mar 2010 13:35 Rebecca, You could try running a antivirus rescue scanner from a WinPE boot disk. Antivirus has a poor track record (< 20%) when it comes to current malware. I have had better luck rescanning after a month. However, if it was my computer I would back up my personal data and then wipe the entire drive (including HPA or DCO, if any). Then reinstall. The only problem is, if you backup to a USB thumbdrive or like that may be infected in the process. So your fresh install will become reinfected when you restore your personal data. A better approach would be to ZIP your personal data up and then netcat the archive to another computer over the network. If you don't understand what I am saying then, yes, you need to hire someone. Regards, Rossetoecioccolato.
From: David Kaye on 4 Mar 2010 13:54 =?Utf-8?B?UmViZWNjYSBDaHVuZw==?= <Rebecca Chung(a)discussions.microsoft.com> wrote: >I'm not sure what exactly is causing this, but Windows Defender keeps popping >up messages like this: >"Application cannot be executed. The file wuauclt.exe is infected. Do you >want to activate your antivirus software now?" That's not Windows Defender; that's malware putting up that message.
From: David Kaye on 4 Mar 2010 13:56 =?Utf-8?B?UmViZWNjYSBDaHVuZw==?= <RebeccaChung(a)discussions.microsoft.com> wrote: >At this point, I'm pretty much resigned to shelling out the money to have >someone repair it, as this malware is specifically preventing me from using >software to remove it... >But thanks for the suggestion. :) If you want to do it yourself, download Malwarebytes on another computer and copy it to a CD or memory stick or something and then install it on your computer while in safe mode. If it's the infection I think it is, safe mode is not affected. Then run Malwarebytes (without the update first) and clean things out. Then go back to regular mode, run Malwarebytes again and update it before scanning a second time.
From: David Kaye on 4 Mar 2010 13:59
Geoff <geoff(a)invalid.invalid> wrote: >Your system is infected, that's for sure. If you can explore the >system you can backup any critical files you want to keep, not >programs, just images, data, etc. Then what you really need to do is >reinstall Windows on it. If you can do that yourself you will save the >money. Chances are, that's what the geeks are going to do anyway. That's now what *I* do. I remove these kinds of infections all the time without reinstalling Windows. By all the time I mean well over 95% of the time. It just takes some doing. It's such a hassle to reinstall programs and try to get everything back to the way it was that I specialize in removing the malware without reinstalling Windows. Sometimes you need to use the installation disk and boot to the recovery console or use an outside program (OS) such as BART-PE. |